General

  • Target

    Executor.zip

  • Size

    18KB

  • MD5

    7bf969fbab5e640eef3966724203975e

  • SHA1

    0ffe09af1635c46cccb6966631be47b37fbbdf6e

  • SHA256

    99d2e3c0ec9e8192f966ad052c8ba89826f36eab367027021498ac9dcb315f2e

  • SHA512

    c17054677218852998b101db916d5d6d01da554331e746fa7293b5de3c87059137983f57469fd8a7f590e45b39e9b44f8a8b16b3196aded01a82655d46040a1e

  • SSDEEP

    384:0+9A2hqpk/YsZ2516OGmxOYi8OJ8x/pVFjNg2Nl8UuMXrjxQfYQdfy8:Z9FezD6tKOYi8OJcxVFjN9NKUrzQR

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1283129065590489211/dEU2uHt9OcimjvWOVka-qrppiq2WKyMjW0QOJzCKDx9yJv76ewzma8jOcUZOGqbMoepy

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Executor.zip
    .zip
  • Executor.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections